This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa
File: 3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa (raw, json)
Hash identifier: ZpqqLfiTiI580tEXAz6U+udyWcf7SRBSyK07xLBftmk=
Subject key identifier: 35:86:28:12:CB:81:ED:94:3B:14:FE:66:CC:6A:8B:45:99:DD:97:F6
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 2F26206E0369FD01C9D179B2FC1F2EAFE55A0A22
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa
Signing time: Thu 13 Nov 2025 10:00:00 +0000
ROA not before: Thu 13 Nov 2025 09:55:00 +0000
ROA not after: Thu 12 Nov 2026 10:00:00 +0000
asID: 9794
IP address blocks: 115.178.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:26:20:6e:03:69:fd:01:c9:d1:79:b2:fc:1f:2e:af:e5:5a:0a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Nov 13 09:55:00 2025 GMT
Not After : Nov 12 10:00:00 2026 GMT
Subject: CN=35862812CB81ED943B14FE66CC6A8B4599DD97F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f1:f5:07:37:b5:6a:3b:77:e4:03:e7:12:18:
d5:99:88:56:5e:f2:ee:90:f0:e2:cc:43:91:07:67:
fd:44:e3:02:af:7c:1a:75:58:11:6f:75:c9:b5:43:
fa:b3:cc:fd:76:a4:db:ac:ee:16:18:28:fb:36:7d:
7e:7b:68:1d:e3:3c:10:2e:60:4b:cc:47:1d:1b:db:
8b:b8:32:91:0f:ee:8a:bd:ef:37:64:7e:0d:13:f4:
a4:46:87:78:3c:94:7b:51:42:29:b1:46:bb:6b:a7:
ed:24:56:1b:44:18:08:e5:c6:01:e9:2e:f7:bd:86:
43:93:0f:36:94:42:04:62:c1:fa:7e:84:0a:94:55:
18:46:d7:a5:f9:6d:32:13:ae:58:e2:fa:1d:ec:d4:
bd:9e:b4:6b:b1:70:1c:5c:37:97:24:c2:e8:50:b2:
ce:8b:63:5d:02:11:2b:e6:cb:f0:e8:a7:15:ff:ae:
04:36:59:a7:7f:d9:88:f9:bb:fe:dc:f5:d7:7b:ff:
64:ce:95:18:d2:e0:e1:59:ec:a3:14:72:f0:c5:b4:
93:c2:ab:50:51:e1:ca:69:6f:75:a8:6f:a6:71:3c:
d7:0e:40:52:55:46:1c:22:d6:ce:63:4c:01:ca:97:
8f:94:d1:20:a5:4c:48:0a:32:4e:69:cf:34:f8:ea:
1a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:86:28:12:CB:81:ED:94:3B:14:FE:66:CC:6A:8B:45:99:DD:97:F6
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133382e302f32332d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:64:ca:ee:3b:5d:e3:72:df:ca:ad:6d:21:96:b1:5c:3b:8f:
c6:6e:57:be:00:de:e3:ac:b1:43:75:28:79:1d:c6:e9:e2:09:
d3:7b:b8:01:65:3c:aa:90:ee:30:95:58:9f:db:b5:7d:e9:31:
ed:8d:0e:58:bc:af:22:3f:2f:19:cc:6c:05:9c:23:67:41:e7:
e4:96:9b:58:cf:9a:30:04:c8:35:f2:85:7a:8d:e9:da:cd:8a:
99:c2:4d:a4:97:24:91:1d:e6:a7:c9:fa:64:81:7b:e1:46:4f:
20:f4:2b:92:23:10:54:7a:34:29:16:27:3f:83:1a:db:17:e4:
17:1f:c0:de:b6:0f:17:ac:7a:0c:a2:ec:51:52:cc:e0:75:b2:
0f:49:59:f9:57:ce:37:c2:d1:ec:01:42:b6:7e:85:68:5a:5f:
3e:96:6e:9c:93:a6:ba:27:7e:6e:1f:7d:74:1c:bf:80:b7:02:
ab:20:b2:f1:0a:5c:55:ef:21:66:df:23:a2:99:8e:e3:7f:3f:
e3:41:f2:35:47:db:16:cd:37:d2:0c:92:e7:7d:63:28:2e:4f:
f2:76:08:3f:7f:c6:f7:fc:b9:b7:e1:a1:e6:91:e0:27:9e:6b:
22:b2:88:5b:81:52:77:f5:ab:88:79:c4:f8:cd:ce:00:b2:d2:
6c:d5:02:8f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULyYgbgNp/QHJ0Xmy/B8ur+VaCiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3
NjNDRjM2MTAeFw0yNTExMTMwOTU1MDBaFw0yNjExMTIxMDAwMDBaMDMxMTAvBgNV
BAMTKDM1ODYyODEyQ0I4MUVEOTQzQjE0RkU2NkNDNkE4QjQ1OTlERDk3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj8fUHN7VqO3fkA+cSGNWZiFZe
8u6Q8OLMQ5EHZ/1E4wKvfBp1WBFvdcm1Q/qzzP12pNus7hYYKPs2fX57aB3jPBAu
YEvMRx0b24u4MpEP7oq97zdkfg0T9KRGh3g8lHtRQimxRrtrp+0kVhtEGAjlxgHp
Lve9hkOTDzaUQgRiwfp+hAqUVRhG16X5bTITrlji+h3s1L2etGuxcBxcN5ckwuhQ
ss6LY10CESvmy/DopxX/rgQ2Wad/2Yj5u/7c9dd7/2TOlRjS4OFZ7KMUcvDFtJPC
q1BR4cppb3Wob6ZxPNcOQFJVRhwi1s5jTAHKl4+U0SClTEgKMk5pzzT46hqFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUNYYoEsuB7ZQ7FP5mzGqLRZndl/YwHwYDVR0j
BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG
QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND
RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTMzMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXOyijANBgkqhkiG
9w0BAQsFAAOCAQEAe2TK7jtd43Lfyq1tIZaxXDuPxm5XvgDe46yxQ3UoeR3G6eIJ
03u4AWU8qpDuMJVYn9u1fekx7Y0OWLyvIj8vGcxsBZwjZ0Hn5JabWM+aMATINfKF
eo3p2s2KmcJNpJckkR3mp8n6ZIF74UZPIPQrkiMQVHo0KRYnP4Ma2xfkFx/A3rYP
F6x6DKLsUVLM4HWyD0lZ+VfON8LR7AFCtn6FaFpfPpZunJOmuid+bh99dBy/gLcC
qyCy8QpcVe8hZt8jopmO438/40HyNUfbFs030gyS531jKC5P8nYIP3/G9/y5t+Gh
5pHgJ55rIrKIW4FSd/WriHnE+M3OALLSbNUCjw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:07 2025 by rpki-client